Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
This article indicates which Defender for Cloud features are supported in Azure commercial and government clouds.
In the support table, NA indicates that the feature isn't available.
| Feature/Plan | Azure | Azure Government | Microsoft Azure operated by 21Vianet |
|---|---|---|---|
| GENERAL FEATURES | |||
| Continuous data export | GA | GA | GA |
| Response automation with Azure Logic Apps | GA | GA | GA |
| Security alerts Generated when one or more Defender for Cloud plans is enabled. |
GA | GA | GA |
| Alert email notifications | GA | GA | GA |
| Alert suppression rules | GA | GA | GA |
| Azure Workbooks integration for reporting | GA | GA | GA |
| Automatic component/agent/extension provisioning | GA | GA | GA |
| FOUNDATIONAL CSPM FEATURES (FREE) | |||
| Asset inventory | GA | GA | GA |
| Security recommendations based on the Microsoft Cloud Security Benchmark | GA | GA | GA |
| Recommendation exemptions | Preview | NA | NA |
| Secure score | GA | GA | GA |
| DEFENDER FOR CLOUD PLANS | |||
| Defender CSPM | GA | NA | NA |
| Defender for App Service | GA | NA | GA |
| Defender for Containers Review detailed feature support |
GA | GA | GA |
| Defender for DNS | GA | GA | GA |
| Defender for Resource Manager | GA | GA | GA |
| Defender for Servers Review detailed feature support. |
GA | GA | GA |
| DEFENDER FOR DATABASES FEATURES | |||
| Defender for Azure SQL database servers | GA | GA | GA A subset of alerts/vulnerability assessments is available. Behavioral threat protection isn't available. |
| Defender for SQL servers on machines | GA | GA | GA |
| Defender for SQL Servers on Machines | GA | GA | GA |
| Vulnerability assessment Express and Classic configurations | GA | GA | GA |
| Advanced threat protection | GA | GA | GA |
| Defender for Open-Source Relational Databases | GA | GA | GA |
| Defender for Azure Cosmos DB | GA | NA | NA |
1: Azure DNS Zone isn't supported for malware scanning and sensitive data threat detection.
Important
As of August 1 2023, customers with an existing subscription to Defender for DNS can continue to use the service, but new subscribers will receive alerts about suspicious DNS activity as part of Defender for Servers P2.
Start reading about Defender for Cloud features.